This KB describes the change that needs to be made to /etc/iscsi/iscsid.conf in RHEL8.2.
After applying the change, follow this link for full iSCSI setup with Linux:
In RHEL 8.2, which was released in April 2020, RedHat added the following parameter to /etc/iscsi/iscsid.conf. This parameter controls the CHAP algorithms used with iSCSI.
- The default settings are as follow:
# To configure which CHAP algorithms to enable set
# node.session.auth.chap_algs to a comma separated list.
# The algorithms should be listen with most prefered first.
# Valid values are MD5, SHA1, SHA256, and SHA3-256.
# The default is MD5.
node.session.auth.chap_algs = SHA3-256,SHA256,SHA1,MD5
- This default settings may cause the following error when trying to login to the VPSA iSCSI target
[root@yRHEL82 ~]$ sudo iscsiadm -m node -T iqn.2011-04.com.zadarastorage:vsa-00000035:1 -p 172.31.10.2 -l -I zadara_172.31.10.2
Logging in to [iface: zadara_172.31.10.2, target: iqn.2011-04.com.zadarastorage:vsa-00000035:1, portal: 172.31.10.2,3260]
iscsiadm: Could not login to [iface: zadara_172.31.10.2, target: iqn.2011-04.com.zadarastorage:vsa-00000035:1, portal: 172.31.10.2,3260].
iscsiadm: initiator reported error (19 - encountered non-retryable iSCSI login failure)
iscsiadm: Could not log into all portals7) Discover the VPSA via iSCSI, this will return the VPSA IQN, which is also available in the VPSA GUI.
- Since Zadara uses MD5 for CHAP algorithm, you will need to edit the entry so MD5 will be the only algorithm of choice
node.session.auth.chap_algs = MD5